Resubmissions

20/09/2026, 19:03

260920-xqg2dsyt4m8

10/09/2026, 16:17

260910-trgv8sscpg8

10/09/2026, 15:44

260910-s6rhjsdn6y8

10/09/2026, 15:33

260910-sy7jssdm8w8

Analysis

  • max time kernel
    304s
  • max time network
    723s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    10/09/2026, 15:44

General

  • Target
    GoreBox-8-5-4.apk
  • Size 252.4MB
  • Sample260910-s6rhjsdn6y
  • SHA256 752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
  • Checks Qemu related system properties. 1 TTPs 10 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Hides multimedia files using a .nomedia file 1 TTPs

    Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.F2Games.GBDE
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4239

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        UnityAdsStorage-private-data.json

        • Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
        • Size 53B
        • SHA256 d6166244b8592dbbaa1e6a03f6542fa98854733290b37a9acb140a3684966796
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
        • Size 93B
        • SHA256 35225515a6b0b2f3d1e547d68ca1ccfc5d19f7091c8a9dfc6b48f457ebc7c2d7
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
        • Size 2KB
        • SHA256 804208369ff2621ce3328c31ee5cd48941d12210c2bf76309b9e16fac3931037
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
        • Size 2KB
        • SHA256 195de3b9ea315b4f411c7187252eb9a4bf9472944a97b01a780445d801133d31
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-public-data.json

        • Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512

        UnityAdsStorage-public-data.json

        • Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
        • Size 111B
        • SHA256 2adf40dda5d0b0956dd402ace9da501e75b3f95495e2390365030158eb38c28a
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-public-data.json

        • Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
        • Size 216B
        • SHA256 92fdb8f2e1ab448f4c0180d9f6b9ea94c2aa61d7a27147c237ac68335c122574
        • MD5 SHA1 SHA512 TLSH

        UnityAdsTest.txt

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsTest.txt
        • Size 4B
        • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
        • MD5 SHA1 SHA512

        UnityAdsWebApp.html

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebApp.html
        • Size 2.3MB
        • SHA256 6be3b179c4a241e3944f8c24402a0f59688dfddd6957930a87878945da5e9a22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityAdsWebViewConfiguration.json

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json
        • Size 500B
        • SHA256 d9a1468939fc8febef628af284710f79b031096aee9a36e299c6a16a64d181bf
        • MD5 SHA1 SHA512 TLSH

        c

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500000.93a81b4b/c
        • Size 1B
        • SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
        • MD5 SHA1 SHA512

        e

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500000.93a81b4b/e
        • Size 553B
        • SHA256 543bb63b767c678373c2fb8a7281c4fb5d0a1807bbaf4dad3a04f3bd217ea305
        • MD5 SHA1 SHA512 TLSH

        g

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500000.93a81b4b/g
        • Size 1B
        • SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
        • MD5 SHA1 SHA512

        s

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500000.93a81b4b/s
        • Size 432B
        • SHA256 4cfbc3a36b557984749872c4349c484f6401c331be39e3f1468dcb50e939e3bc
        • MD5 SHA1 SHA512 TLSH

        e

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500001.93a81b4b/e
        • Size 575B
        • SHA256 7aeaff84e9b8410f67bb8d2332b999220a0e56c9039ddc39125112c232d66b6c
        • MD5 SHA1 SHA512 TLSH

        e

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500002.93a81b4b/e
        • Size 1KB
        • SHA256 6f6715f5817d71ab6e505bdbbac20fbded0f2b8175808f51ce4e02d12ff131c0
        • MD5 SHA1 SHA512 TLSH

        e

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905513500002.93a81b4b/e
        • Size 1KB
        • SHA256 f5579a0673d2ac1ee95a5db5bc514a3e1a1dc1da2da7bb9db1ceb8a9d8859373
        • MD5 SHA1 SHA512 TLSH

        e

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905514900003.93a81b4b/e
        • Size 566B
        • SHA256 b58959479d21d90919b60f1657e24c8fa8f3ad5715ebf91139025a9ae69942b5
        • MD5 SHA1 SHA512 TLSH

        config

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/config
        • Size 293B
        • SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
        • MD5 SHA1 SHA512 TLSH

        values

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/values
        • Size 133B
        • SHA256 f650855b28726ea2db38284534d560ff2e27cbf5a2c14633da7baa557fdb08d2
        • MD5 SHA1 SHA512 TLSH

        global-metadata.dat

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/Metadata/global-metadata.dat
        • Size 6.0MB
        • SHA256 7e78000ca9049a6afa028f3c23d5bbb9256bea70a3a196605088b405499bea90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscorlib.dll-resources.dat

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/Resources/mscorlib.dll-resources.dat
        • Size 329KB
        • SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unity.ver

        • Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/unity.ver
        • Size 36B
        • SHA256 308d45f6413e833c540ddea9ed3432cb59f7681089ce5f750c99c886a995c7c4
        • MD5 SHA1 SHA512